Network Access Control

Dual ACS solution (4.2) with one ACS doing the authenticating, the other acting as a standby. Recently when accessing nortel switches, they authenticate to both ACS, as some are going to ACS2 despite their primary RADIUS server being ACS1.The ACS sol...

Hi There, Any body has implemented 802.1x port authentication with ACS & windows AD. which authentication is supported in this kind of setup ms-chap or MD5 or PEAP (on the clients).and what are the challenges if windows user accounts password changed...

When I upgrade from an ACS from version 4.0 to version 4.1 statics users are saved but dynamic are not saved.This problem was detected in cisco? Is there a way to export the database from version 4.0 to be able to import a version 4.1.I have a big pr...

Hi All, can any body tell me what happens when a switch/hub is connected to a 802.1x port which is configured for guest vlan if switch does not receive 802.1x request on that port from switch/hub..all the pcs connected to that port will be part of gu...

Guys we have a ACS running and now i have to put another one as a backup while i was configuring it , it ask for password (internal database encryption) i choose one but i am confuse that shd it be the same as primary ACS one as it has been config ag...

Hi,I got a problem with an access server (5350). The authentication is working but I'm having trouble with the authorization lately. This is an intermittent problem. Any idea or troubleshooting step I should take? Looks like ACS is not receiving auth...

I have 7206 with 12.2 SB as a broadband PPPoE aggregator. 7206 uses tac_plus server to authenticate user PPPoE sessions. The problem is tac_plus does not log stop records. After some research I find out that router can not send accounting records whi...

Hi I have a setup ACS 4.1 CS-Manager 3.2.2I have intergrated the CS-Manager into ACS with no problems. However when I try to add devices into the CS-Manager I get the message "The Device is not in the Cisco Secure ACS"I have one wildcard entry encomp...

Hi, I am using AS5350 and I am using it for calling card application using Clear Box as my RADIUS Server for AAA. My question now, how would I know if cisco is sending the dtmf for "enter card number.au" on the RADIUS server ? Does the card number in...

The box was operational for last few months. Suddenly it is not booting and giving "descret error".Thanx in advance

hi,Currently i am using aaa accouting for 3560 switches with ACS4.1 solution engine. I want to log the IOS commands entered. I have chosen the "cmd" and "cmd-arg" field in the CSV and syslog (tacacs+ accounting), these field are empty (..) when the c...

I have an ASA 5510 we use as our corporate VPN and Firewall. Currently we have a Microsoft CRM solution which only authenticates via Active Directory on an internal server. We want to be able to have users log into the WebVPN and access the URL for t...

Have had a ACS 4.2 solution installed across 2 servers (master/slave), everything working fine with devices using it for both RADIUS and TACACS+ authentication. This week however, I have had an issue with a network group that use RADIUS as switches (...

Hello EverybodyI have a ACS Appliance running version 4.2 ==> ACS 4.2.0.124.12-Fix where the function is just for authenticate users by protocol RADIUS against a Active Directory - Microsoft.The Remote Agents are running, AAA Clients and Server are O...

If changing the length of the Password length to 12, do the Users get informed when they try and log in and then are required to change their password to 12 characters ?